GauntClick
Exploit Weaponization Expert
LEVEL 1
400 XP
Hey Folks, in this tutorial we will show you how we can crack passwords of any zip file in few second. In this tutorial we will uses more than one software or tools to recover forgotten ZIP password. As we know that removal of a password from an encrypted zip file can be easy or hard depending on the complexity of the password but these kind of tool are uses dictionary file for cracking the passwords.
Requirements
Kali Linux = ( Version 2020.1 )
Lets take a look
!!Protect ZIP File
Now first we will protect our zip file with any random string by using the following command.
Usage
zip –password < password > < zip file name > < your files >zip --password shubham@# crack2.zip file1.txt file.txt rep.txt1zip--password shubham@# crack2.zip file1.txt file.txt rep.txt
Zip2john
Zip2john create the hashes of any zip file after that john can crack it. By using the following command we can save the output in txt file format.
zip2john crack.zip > zip.hashes1zip2john crack.zip>zip.hashes
We have successfully got the hash which you can see by the cat command.
cat zip.hashes1cat zip.hashes
John the Ripper
After obtain the hashes we will uses john the ripper tool which will uses his default dictionary to crack the hashes.
Usage
john < hash file >john zip.hashes1john zip.hashes
It will try a bunch of passwords to crack the hash and when it successfully gets the key it will return the result to you.
7zip-Crack
7zip-Crack is the open source tool that is listed on github page. Again It uses the dictionary to find the right key of the password protected zip file but in this tool we have to add our custom wordlist. We need to setup this tool using the following command.
git clone https://github.com/Goron/7zip-crack.git
cd 7zip-crack
chmod +x *
./7zip-crack1234git clone
https://github.com/Goron/7zip-crack.gitcd7zip-crackchmod+x *./7zip-crack
As you can see above we can operate this tool easily and similarly we can crack the password of zip file by using the following command.
7zip-crack < zip file > < wordlist >17zip-crack<zip file><wordlist>
Fcrackzip
First we will download this tool from the official website.
wget http://ftp.br.debian.org/debian/pool/main/f/fcrackzip/fcrackzip_1.0-10_amd64.deb1wget http://ftp.br.debian.org/debian/pool/main/f/fcrackzip/fcrackzip_1.0-10_amd64.deb
After depackages this tool it will automatically added on binary’s and after that we can start by enter only the name of this tool on terminal.
sudo dpkg -i fcrackzip_1.0-10_amd64.deb1sudo dpkg-ifcrackzip_1.0-10_amd64.deb
Now lets we will try to crack our password protected zip file by this tool using the following command.
Usage
fcrackzip -D -p < password list > -u < zip file >- -D = Dictionary
- -p = password list
- -u = exclude wrong password
fcrackzip -D -p /usr/share/john/password.lst -u crack2.zip1fcrackzip-D-p/usr/share/john/password.lst-ucrack2.zip
ZIP-Password-Brute Force
ZIP-Password-Brute Force tool is an open source tool which is available for both Window and Linux. First we need to setup this tool by using the following command.
git clone https://github.com/The404Hacking/ZIP-Password-BruteForcer.git
cd ZIP-Password-BruteForcer
python ZIP-Password-BruteForcer.py123git clone
https://github.com/The404Hacking/ZIP-Password-BruteForcer.gitcd ZIP-Password-BruteForcerpython ZIP-Password-BruteForcer.py
As you can see below, this tool takes few seconds to crack the password protected zip file.
Zip-Cracker
Zip-Cracker is great tool for crack the encrypted zip files. This is open
source tool which is hosted on github page and here is the link of this tool from where you can downloaded it.git clone https://github.com/lamanihani/zip-cracker.git
cd zip-cracker/
python3 crack.py123git clone
https://github.com/lamanihani/zip-cracker.gitcd zip-cracker/python3 crack.py
After executing the above command we are ready to start this tool. Now here we need to enter the location of protected zip file.
After giving the dictionary it will easily crack the password of zip file.
hApPy HaCkInG
!!About the AuthorShubham Goyal Certified Ethical Hacker, information security analyst, penetration tester and researcher. Can be Contact on Linkedin.